CVE-2025-32709 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

CISA KEVExploited: confirmedMicrosoft

Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges to administrator.

Vulnerability details

Affected productsWindows
KEV remediation due2025-06-03